USN-3722-5
clamav regression
USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an issue which caused dpkg-reconfigure to enter an infinite loop. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing certain HWP files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0360)
It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0361)
What each source reports
OSV No score
clamav regression
USN-3722-1 fixed vulnerabilities in ClamAV. The new package introduced an issue which caused dpkg-reconfigure to enter an infinite loop. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that ClamAV incorrectly handled parsing certain HWP files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0360)
It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0361)
- Record
USN-3722-5- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
clamavUbuntu:14.04:LTS |
before 0.100.1+dfsg-1ubuntu0.14.04.4, plus listed versions 0.97.8+dfsg-1ubuntu40.97.8+dfsg-1ubuntu50.98.1+dfsg-1ubuntu40.98.1+dfsg-1ubuntu50.98.1+dfsg-2ubuntu2 Show 12 moreShow less0.98.1+dfsg-4ubuntu10.98.1+dfsg-4ubuntu1.10.98.5+addedllvm-0ubuntu0.14.04.10.98.6+dfsg-0ubuntu0.14.04.10.98.7+dfsg-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.10.99.2+addedllvm-0ubuntu0.14.04.20.99.3+addedllvm-0ubuntu0.14.04.10.99.4+addedllvm-0ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.10.100.1+dfsg-1ubuntu0.14.04.20.100.1+dfsg-1ubuntu0.14.04.3 |
0.100.1+dfsg-1ubuntu0.14.04.4 |
clamavUbuntu:16.04:LTS |
before 0.100.1+dfsg-1ubuntu0.16.04.3, plus listed versions 0.98.7+dfsg-0ubuntu40.98.7+dfsg-0ubuntu50.99+dfsg-1ubuntu10.99+dfsg-1ubuntu1.10.99+dfsg-1ubuntu1.2 Show 7 moreShow less0.99.2+dfsg-0ubuntu0.16.04.10.99.2+dfsg-0ubuntu0.16.04.20.99.2+dfsg-0ubuntu0.16.04.30.99.3+addedllvm-0ubuntu0.16.04.10.99.4+addedllvm-0ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.10.100.1+dfsg-1ubuntu0.16.04.2 |
0.100.1+dfsg-1ubuntu0.16.04.3 |
clamavUbuntu:18.04:LTS |
before 0.100.1+dfsg-1ubuntu0.18.04.3, plus listed versions 0.99.2+dfsg-6ubuntu20.99.3~beta1+dfsg-2ubuntu10.99.3~beta1+dfsg-2ubuntu20.99.3+addedllvm-0ubuntu10.99.3+addedllvm-0ubuntu20.99.4+addedllvm-0ubuntu10.100.1+dfsg-1ubuntu0.18.04.10.100.1+dfsg-1ubuntu0.18.04.2 |
0.100.1+dfsg-1ubuntu0.18.04.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3722-5 is a vulnerability with no CVSS score yet in clamav, published September 18, 2018. No source lists public exploit code. Fixed in clamav 0.100.1+dfsg-1ubuntu0.14.04.4.